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Amendments to the Claims 



This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims: 

1 . (Currently Amended) In a distributed computer system, a A method for locating a 
discrepancy in mapping information that maps an identifier to a particular resource in a domain 
naming system database , the method comprising acts of: 

compiling a list of nameservers to be queried comprising acts of: 

sending a namespace mapping resolution query to a plurality of network nodes; 

waiting for one or more responses from the plurality of network nodes; 

determining whether a network node in the plurality of network nodes is a 

nameserver based on a format of one or more responses received from the network node; 

and 

if the network node is a nameserver, adding the network node to the list of 

nameservers to be queried; 

determining a first mapping in a domain naming system, the act of determining the first 
mapping comprising an act of obtaining an authoritative mapping from an authoritative source ; 

determining a second mapping in the domain naming system, the act of determining a 
second mapping comprising acts of querying a nameserver of the list of nameservers to be 
queried and receiving a response from the nameserver, the response containing the second 
mapping, wherein the first mapping is a first namespace mapping that maps a first name to a first 
resource and the second mapping is a second namespace mapping that maps a second name to a 
second resource ; 

comparing the first mapping to the second mapping and identifying at least one 
discrepancy between the first and second mapping; and 

generating and sending an alert message to a user, the alert message indicating the at least 
one discrepancy between the first and second mapping. 
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2. (Canceled) 

3. (Canceled) 

4. (Currently Amended) The method of claim 3 J_, wherein the authoritative source is at 
least one of: 

an authoritative nameserver; and 

a database storing a plurality of authoritative mappings. 

5. (Original) The method of claim 1, further comprising an act of reporting the at least one 
discrepancy to a user. 

6. (Canceled) 

7. (Currently Amended) The method of claim 6 1_, wherein the first namespace mapping is 
stored on an authoritative nameserver and the act of determining a first mapping comprises an 
act of obtaining the first mapping from the authoritative nameserver. 

8. (Canceled) 

9. (Canceled) 

10. (Currently Amended) The method of claim & 1_, wherein the act of querying a 
nameserver comprises an act of requesting at least one namespace mapping record from the 
nameserver. 

11. (Canceled) 

12. (Canceled) 
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13. (Currently Amended) The method of claim I -H-, wherein the act of determining 
comprises an act of determining that a network node in the plurality of nodes is not a nameserver 
if the network node does not respond to the namespace mapping resolution query. 

14. (Currently Amended) The method of claim 1 9, wherein the act of compiling a list of at 
least one nameserver comprises an act of: 

listening for a request from a non-authoritative nameserver to an authoritative 
nameserver; and 

when the request is detected, adding the non-authoritative nameserver to a list of 
nameservers. 

15. (Original) The method of claim 14, wherein the request is a resolve request. 

16. (Currently Amended) A method for discovering nameservers in a distributed computer 
system , comprising acts of: 

sending a namespace mapping resolution query to a plurality of network nodes from a 
montoring computer system that monitors namespace mapping violations ; 

waiting for one or more responses from at least one of the network nodes; 
determining whether a network node in the plurality of network nodes is a nameserver; 

and 

storing, in a storage device in a die monitoring computer system , an indication that the 
network node is a nameserver in response to the act of determining , the indication of the network 
node being stored in a list of nameservers to be queried by the monitoring computer system to 
determine namespace mapping violations ; 

determining a first mapping in a domain naming system, the act of determining the first 
mapping comprising an act of obtaining an authoritative mapping from an authoritative source; 

determining a second mapping in the domain naming system, the act of determining a 

second mapping comprising acts of querying a nameserver of the list of nameservers to be 
queried and receiving a response from the nameserver, the response containing the second 
mapping, wherein the first mapping is a first namespace mapping that maps a first name to a first 
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resource and the second mapping is a second namespace mapping that maps a second name to a 
second resource; 

comparing the first mapping to the second mapping and identifying at least one 

discrepancy between the first and second mapping; and 

generating and sending an alert message to a user, the alert message indicating the at least 

one discrepancy between the first and second mapping . 

17. (Canceled) 

18. (Canceled) 

19. (Currently Amended) A method for discovering nameservers in a distributed computer 
system , comprising acts of: 

listening for a request from a non-authoritative nameserver to an authoritative 
nameserver; 

when the request is detected, adding the non-authoritative nameserver to a list of 
nameservers; and 

storing the list of nameservers in a memory of a monitoring computer system , the list of 
nameservers to be queried by the monitoring computer system to determine namespace mapping 
violations ; 

determining a first mapping in a domain naming system, the act of determining the first 
mapping comprising an act of obtaining an authoritative mapping from an authoritative source; 

determining a second mapping in the domain naming system, the act of determining a 

second mapping comprising acts of querying a nameserver of the list of nameservers to be 
queried and receiving a response from the nameserver, the response containing the second 
mapping, wherein the first mapping is a first namespace mapping that maps a first name to a first 
resource and the second mapping is a second namespace mapping that maps a second name to a 
second resource; 

comparing the first mapping to the second mapping and identifying at least one 

discrepancy between the first and second mapping; and 
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generating and sending an alert message to a user, the alert message indicating the at least 

one discrepancy between the first and second mapping . 



20. (Original) The method of claim 19, wherein the request is a resolve request. 

21 . (Currently Amended) An apparatus A distributed computer system for locating 
discrepancies in domain name databases, the apparatus distributed computer system comprising: 

a detector adapted to determine a first mapping and a second mapping, wherein the 
detector is further adapted to compare the first mapping to the second mapping and to identify at 
least one discrepancy between the first mapping and second mapping , wherein the apparatus is 
configured to obtain an authoritative mapping from an authoritative source and store the 
authoritative mapping in the database ; 

a discoverer adapted to discover at least one nameserver among a plurality of network 

nodes; 

a database configured to store the first mapping and the second mapping and a list of a 

plurality of discovered nameservers, including the at least one nameserver, wherein the apparatus 
is configured to query the at least one nameserver, and store the second mapping contained 
within a response received from the nameserver, wherein the discoverer is adapted to send a 
namespace mapping resolution query to a plurality of network nodes, wait for one or more 
responses from the plurality of network nodes, determine whether a network node in the plurality 
of network nodes is a nameserver based on a format of one or more responses received from the 
network node, and if the network node is a nameserver, storing the network node to the list of 
nameservers to be queried; and 

a component adapted to generate an alert message and send the alert message to a user, 
the alert message indicating the at least one discrepancy between the first mapping and the 
second mapping. 

22. (Canceled) 

23. (Canceled) 
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24. (Canceled) 

25. (Canceled) 
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